Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: cgC6lrWpXmPLg8pxQ+NuXIihNJjrwvjOeDL24fUaGZ4=
Subject key identifier: 9D:6A:F7:75:F2:46:74:44:3E:95:84:2F:29:39:9B:99:0D:2E:1E:9F
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 01A0F0E73BB9752263778E688DB3F54EDBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1A7C
Signing time: Wed 30 Sep 2026 06:01:20 +0000
Manifest this update: Wed 30 Sep 2026 06:01:20 +0000
Manifest next update: Thu 01 Oct 2026 06:01:20 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: bDXW7CCzrbGnklBKu2b9V1gAAWpMmMqnoVq5ooNHyOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:3b:b9:75:22:63:77:8e:68:8d:b3:f5:4e:db:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Sep 30 06:01:20 2026 GMT
Not After : Oct 1 06:01:20 2026 GMT
Subject: CN=9d6af775f24674443e95842f29399b990d2e1e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:35:4d:cf:94:96:24:b1:be:c2:c9:37:df:
49:6a:f2:c0:8d:7e:32:93:c3:f8:e8:fd:a2:e5:b3:
ca:8c:0f:5f:aa:ae:5f:62:83:ae:d7:c6:44:a6:b3:
86:31:04:21:1a:ee:05:00:77:07:25:e2:1d:46:83:
b6:37:58:3b:43:04:57:e3:8f:2e:d8:ec:b0:56:81:
b4:7f:d7:48:72:f6:e0:61:22:1e:6a:3c:56:69:34:
fd:ec:9c:6e:b1:ed:0f:20:93:44:0a:e0:31:e5:7e:
4b:91:2a:de:8c:e4:f9:91:25:b8:9c:2c:f8:d4:71:
20:2d:db:8a:9f:9a:f5:26:d5:2a:70:89:f7:fc:6f:
5d:35:42:2a:c5:e3:5d:c5:9a:9e:e4:e7:54:cd:1b:
29:32:70:1f:f4:16:9b:79:d2:c3:d9:6b:5f:99:49:
06:70:1e:f7:e5:d0:1c:51:ce:b0:32:17:c8:8c:eb:
2a:78:71:19:75:c7:32:27:73:58:bb:bf:41:ae:3d:
22:76:6e:58:be:66:6c:a0:5b:0b:ce:39:69:8e:8f:
79:77:8e:2f:0c:86:16:9c:32:6b:74:0e:18:6b:6f:
26:ab:44:2c:f3:ee:21:9d:e6:be:0b:19:a5:ab:ef:
58:52:c5:e9:50:e6:b0:7c:2f:1c:23:e9:e3:c8:42:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6A:F7:75:F2:46:74:44:3E:95:84:2F:29:39:9B:99:0D:2E:1E:9F
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:82:68:1a:45:83:36:db:68:69:80:9e:39:3e:81:29:64:b2:
94:f6:70:f5:a8:11:b9:cb:6f:ef:e4:7a:5a:b0:9b:eb:f7:be:
f4:f2:f6:77:60:61:82:96:e7:2c:e5:f8:1a:bc:9b:65:a3:a2:
6f:52:3e:80:00:fe:0e:36:7f:33:56:76:c2:a3:a9:68:26:f1:
78:3c:7b:69:04:7d:a4:45:3e:4a:08:c4:e7:a2:5c:0e:ad:b8:
e4:47:fd:94:31:17:69:b6:e7:36:59:26:bf:35:3f:35:a7:ee:
c7:83:9e:6d:cf:66:36:55:51:8f:35:89:73:21:c3:b7:96:2e:
2b:ea:28:0b:0b:e0:16:ba:8f:f3:5c:af:29:5c:f3:9f:1a:09:
26:84:ce:e6:ef:00:cd:98:61:68:77:d8:2b:8f:65:92:72:b0:
f5:df:ef:5f:91:74:4d:d6:11:ce:fc:2e:48:a8:36:ad:d1:a4:
ce:bb:f8:33:81:01:1e:60:dd:fc:b8:e7:44:09:aa:fb:69:8b:
3b:e5:86:1c:f5:fa:c2:f7:d6:53:4e:4b:21:14:9e:11:ac:1e:
96:91:9f:ed:f9:1a:0a:13:e5:70:d4:48:61:ef:ed:37:ea:7b:
c2:90:fc:90:01:dd:a0:1a:cb:2d:ab:f0:73:85:3f:40:40:64:
86:4a:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:28:49 2026 by rpki-client